← Back
CWE-755

613 CVEs • Abstraction: Class • Likelihood of Exploit: Medium

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

JSON object

Loading...

CVEs (613)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Boom Core
Openhwgroup
2Cva6
Riscvc Boom
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMP violation occurs during address translation.
1Openhwgroup
1Cva6
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a treats non-standard fence instructions as illegal which can affect the function of the application.
1Openhwgroup
1Cva6
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a implements an incorrect exception type when an illegal virtual address is loaded.
1Openhwgroup
1Cva6
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a and RISCV-Boom commit ad64c5419151e5e886daee7084d8399713b46b4b implements the incorrect exception type when a PMA violation occurs during address translation.
1Openhwgroup
1Cva6
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted det instructions rather create an exception.
1Openhwgroup
1Cva6
Jun 17, 2026
Jul 18, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
CVA6 commit d315ddd0f1be27c1b3f27eb0b8daf471a952299a executes crafted or incorrectly formatted sfence.vma instructions rather create an exception.
1Gimp
1Gimp
Jun 17, 2026
Jun 24, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).
1Codesys
2Plcwinnt
Runtime Toolkit
Jun 17, 2026
Jun 24, 2022
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the req...Show more
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.Show less
1Autodesk
1Navisworks
Jun 17, 2026
Jun 21, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a craf...Show more
A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.Show less
1Google
1Android
Jun 17, 2026
Jun 7, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Improper handling of insufficient permissions vulnerability in addAppPackageNameToAllowList in PersonaManagerService prior to SMR Jun-2022 Release 1 allows local attackers to set some setting value in work space.
1Google
1Android
Jun 17, 2026
Jun 7, 2022
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetoot...Show more
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionError function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.Show less
1Google
1Android
Jun 17, 2026
Jun 7, 2022
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Blue...Show more
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in sendIntentSessionCompleted function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.Show less
1Google
1Android
Jun 17, 2026
Jun 7, 2022
N/A· v4
4.3 MEDIUM· v3
3.3 LOW· v2
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connec...Show more
Broadcasting Intent including the BluetoothDevice object without proper restriction of receivers in activateVoiceRecognitionWithDevice function of Bluetooth prior to SMR Jun-2022 Release 1 leaks MAC address of the connected Bluetooth device.Show less
1Google
1Android
Jun 17, 2026
Jun 7, 2022
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unprotected broadcast in sendIntentForToastDumpLog in DisplayToast prior to SMR Jun-2022 Release 1 allows untrusted applications to access toast message information from device.
1Sap
1Contributor License Agreement Assistant
Jun 17, 2026
Jun 6, 2022
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Due to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.
3Bottlepy
DebianFedoraproject
3Bottle
Debian LinuxFedora
Jun 17, 2026
Jun 2, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Bottle before 0.12.20 mishandles errors during early request binding.
1Axiosys
1Bento4
Jun 17, 2026
May 16, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Bento4 v1.6.0.0 was discovered to contain a segmentation fault via the component /x86_64/multiarch/strlen-avx2.S.
1Intel
53Core I9 10900x Firmware
Core I9 10920x FirmwareCore I9 10940x Firmware+50 more
Jun 17, 2026
May 12, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
1Eset
9Endpoint Antivirus
Endpoint SecurityFile Security+6 more
Jun 17, 2026
May 11, 2022
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s...Show more
Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0; 6.0 versions prior to 8.1.2050.0; 6.0 versions prior to 8.0.2053.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.Show less
1Eset
9Endpoint Antivirus
Endpoint SecurityFile Security+6 more
Jun 17, 2026
May 10, 2022
N/A· v4
7.1 HIGH· v3
3.6 LOW· v2
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. E...Show more
Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.Show less